Privacy Policy

1. Introduction

Welcome to Lessorio ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management platform.

By using Lessorio, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Account Information: Name, email address, phone number, password
• Profile Information: Business name, address, GST number, PAN
• Property Information: Property addresses, rent amounts, tenant details
• Tenant Information: Names, contact details, ID proofs (Aadhaar, PAN)
• Financial Information: Payment records, expense details, bank account information for reconciliation

2.2 Automatically Collected Information

When you use our platform, we automatically collect:

• Device Information: Device type, operating system, browser type
• Usage Data: Pages visited, features used, time spent
• Log Data: IP address, access times, error logs
• Cookies: Session cookies, preference cookies, analytics cookies

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform
• Process your transactions and manage your account
• Send rent reminders and notifications to your tenants
• Generate agreements, receipts, and reports
• Calculate and generate GST and TDS reports
• Improve our platform and develop new features
• Communicate with you about updates, security alerts, and support
• Detect and prevent fraud and abuse
• Comply with legal obligations

4. Information Sharing

We may share your information in the following situations:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Razorpay: For payment processing (subject to their privacy policy)
• AWS SNS: For SMS notifications
• AWS SES: For email communications
• AWS: For cloud hosting and storage

4.2 Legal Requirements

We may disclose your information if required by law, such as to comply with a subpoena or similar legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If Lessorio is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 No Sale of Personal Data

We do not sell your personal information to third parties. Your data is never used for advertising purposes or shared with data brokers.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Regular backups with secure storage
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained while your account is active
• Transaction Records: Retained for 8 years for tax compliance
• Agreements: Retained for 8 years after agreement end date
• Deleted Account Data: Permanently deleted 30 days after account deletion

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Export: Download your data in a portable format (CSV, Excel)
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Request limitation of data processing

To exercise these rights, please contact us at privacy@lessorio.com

8. Cookies & similar technologies (India)

Lessorio is built for landlords in India. When you visit our website or use our app, we store cookies and similar technologies on your device as described below. Under the Digital Personal Data Protection Act, 2023 (DPDPA), we obtain your consent before placing optional (non-essential) cookies.

8.1 Types of cookies we use

• Essential cookies: Required for sign-in, security, fraud prevention, and core platform features. These cannot be disabled while you use Lessorio.
• Functional cookies: Remember your preferences (for example dashboard settings and your cookie choices). Optional — enabled only if you consent.
• Analytics cookies: Help us understand how the product is used so we can improve it (for example via PostHog). Data is aggregated where possible. Optional.
• Marketing cookies: Measure Lessorio campaigns and product updates. We do not use these for third-party advertising networks. Optional.

8.2 Your choices

On your first visit, a cookie banner lets you accept all cookies, reject optional cookies, or manage preferences by category. You can change your choices at any time via Cookie Preferences in the website footer or in Settings inside the app. Withdrawing consent for optional cookies will not affect essential cookies needed to run the service.

You may also control cookies through your browser settings. Disabling essential cookies may prevent you from signing in or using parts of the platform.

8.3 Consent records

We log your cookie consent choices (timestamp, categories selected, and policy version) to demonstrate compliance with DPDPA. Consent logs are retained in line with our data retention policy and are not used for marketing.

9. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any linked sites.

10. Children's Privacy

Lessorio is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Users

Lessorio is designed for use in India. If you access our platform from outside India, please be aware that your information may be transferred to and processed in India, where data protection laws may differ from your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification.

We encourage you to review this Privacy Policy periodically for any changes.

13. Data Protection Officer (DPO) & Grievance Contact

In compliance with DPDPA, GDPR, and CCPA regulations, we have designated a Data Protection Officer to handle all privacy-related inquiries and grievances.

You can contact our DPO for:

• Exercising your data protection rights (access, correction, deletion, portability)
• Filing grievances related to data processing
• Reporting data breaches or security concerns
• Requesting information about data processing activities
• Withdrawing consent for data processing
• Opting out of data sales (CCPA)

We will respond to your inquiry within 30 days as required by applicable data protection laws.

14. Contact Us

For general inquiries about this Privacy Policy, please contact us:

• Email: privacy@lessorio.com
• Address: Lessorio Technologies, Hyderabad, Telangana, India